[vlc-devel] [rfc] Let the web plugin have output chains

Anthony Loiseau thannoy at actech-innovation.com
Mon Dec 21 14:49:02 CET 2009


I think enabling sout in the ActiveX component could be interesting, but 
not in the same way as you.

Enabling it when embedded in HTML, even if we success to restrict 
destination, can be a threat as Remi show you. One may not want a 
web-page (in foreground, background or in a tab) to grab its webcam or 
microphone and stream it on the Internet.

The only point I find it useful is when you embed ActiveX component in a 
desktop application, using Visual Basic for example. In this case, it 
would be great to have no restriction.


-Thannoy



Luca Barbato wrote:
> The web plugin currently doesn't allow (rightly) to have stream out at 
> all. That is a security measure to prevent rogue scripts causing havoc 
> on users hd or, even worse, flood innocent servers across internet.
> 
> Still would be nice to have this limit relaxed having more or less the 
> same policy you get in javascript (same-site): you may be allowed to 
> stream to the same server you got the webpage instantiating the plugin.
> 
> This way you may have the web plugin used not only to let content 
> fruition (like I did for media.lscube.org and 
> media.accademiadellescienze.it) but also to have people interact using 
> their audio-in and webcam and streaming back to the server in some way. 
> (RTSP ANNOUNCE&RECORD would be the most proper way but could take a bit 
> to have it implemented...)
> 
> Any opinion on it?
> 
> lu
> _______________________________________________
> vlc-devel mailing list
> To unsubscribe or modify your subscription options:
> http://mailman.videolan.org/listinfo/vlc-devel
> 
> 



More information about the vlc-devel mailing list